{"ip":"20.163.3.237","total_events":9,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["9 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"229 bytes sent","bytes_sent":229,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-16T16:51:16","last_seen":"2026-10-01T18:08:57","events_24h":0,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"Arizona","city":"Phoenix","lat":33.4532,"lon":-112.0748,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":5060,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T12:17:02","last_seen":"2026-10-05T12:17:02","recent":[{"timestamp":"2026-10-05T12:17:02","port":5060,"src_port":45079,"proto":"udp","app_proto":"","app_protocol":"","summary":"MGLNDD_<HONEYPOT>_5060\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353036300a","sni":"","session":"9daf9d6c-8ad5-4050-8285-cfef310dc008","bytes_in":26,"source_verified":false,"enriched":{"digest":"e9e2d1bd8d8b089c","strings":["MGLNDD_<HONEYPOT>_5060"]}}]},"top_ports":[{"port":6379,"proto":"tcp","label":"Redis","count":2},{"port":8047,"proto":"tcp","label":"","count":1},{"port":8081,"proto":"tcp","label":"","count":1},{"port":5353,"proto":"tcp","label":"","count":1},{"port":5093,"proto":"tcp","label":"","count":1},{"port":3790,"proto":"tcp","label":"","count":1},{"port":1414,"proto":"tcp","label":"","count":1},{"port":5985,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-16","count":2},{"date":"2026-09-17","count":1},{"date":"2026-09-18","count":2},{"date":"2026-09-22","count":1},{"date":"2026-09-26","count":1},{"date":"2026-10-01","count":2}],"recent_events":[{"timestamp":"2026-10-01T18:08:57","port":8047,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8047\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383034370a","method":"","user_agent":"","ja3":"","session":"ab957c31-d01f-4de0-8dcb-d6ddc5cf7e19","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":12,"enriched":{"digest":"c3e2dfba2b168eee","strings":["MGLNDD_<HONEYPOT>_8047"]}},{"timestamp":"2026-10-01T08:27:03","port":1414,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1414\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313431340a","method":"","user_agent":"","ja3":"","session":"c586f029-dba4-4999-971e-30e00b87d47c","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":12,"enriched":{"digest":"be2331fdf69dff81","strings":["MGLNDD_<HONEYPOT>_1414"]}},{"timestamp":"2026-09-26T08:13:20","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_6379\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f363337390a","method":"","user_agent":"","ja3":"","session":"52c5f96d-1a28-4f84-8c68-4f9fcc76f0e9","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":5,"enriched":{"digest":"c527d5681f7b683c","strings":["MGLNDD_<HONEYPOT>_6379"]}},{"timestamp":"2026-09-22T14:24:08","port":8081,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8081\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383038310a","method":"","user_agent":"","ja3":"","session":"3dca9b59-1aa9-4bb9-9a7a-3f2b41f70b40","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"ec226b1a61f4eceb","strings":["MGLNDD_<HONEYPOT>_8081"]}},{"timestamp":"2026-09-18T14:03:59","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_6379\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f363337390a","method":"","user_agent":"","ja3":"","session":"2f377e3f-4233-4810-90db-fd8b1daf291e","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":5,"enriched":{"digest":"c527d5681f7b683c","strings":["MGLNDD_<HONEYPOT>_6379"]}},{"timestamp":"2026-09-18T08:26:38","port":3790,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_3790\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f333739300a","method":"","user_agent":"","ja3":"","session":"26d75a59-27ff-4683-a5d4-1b6e56964f57","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":12,"enriched":{"digest":"63555966e1b6b47f","strings":["MGLNDD_<HONEYPOT>_3790"]}},{"timestamp":"2026-09-17T01:21:28","port":5353,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5353\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353335330a","method":"","user_agent":"","ja3":"","session":"8f4231ac-c4e3-46e8-97df-79bf07814423","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":12,"enriched":{"digest":"a0612689837e5cde","strings":["MGLNDD_<HONEYPOT>_5353"]}},{"timestamp":"2026-09-16T20:42:25","port":5093,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5093\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353039330a","method":"","user_agent":"","ja3":"","session":"50873304-9f37-4a3d-b565-ab6bfdc5177a","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":12,"enriched":{"digest":"986eaa946b6ab9c1","strings":["MGLNDD_<HONEYPOT>_5093"]}},{"timestamp":"2026-09-16T16:51:16","port":5985,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5985\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353938350a","method":"","user_agent":"","ja3":"","session":"62805010-3a6c-42e6-af96-4fd1a339b7fc","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":12,"enriched":{"digest":"8923a3fae2da3b40","strings":["MGLNDD_<HONEYPOT>_5985"]}}],"http_methods":[],"distinct_ports_total":8,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:49:23.000304+00:00"}